Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 May 2005 14:21:19 -0600
From:      Chris Warren <chris@dawgiestyle.com>
To:        cs <cs-fbsd@ctzen.com>
Cc:        FreeBSD <freebsd-questions@freebsd.org>
Subject:   Re: Is this possible ? inherit group permissions
Message-ID:  <1116879679.11570.0.camel@localhost.localdomain>
In-Reply-To: <4292399E.30107@ctzen.com>
References:  <42900CC6.4090701@ctzen.com> <44wtpq13lu.fsf@be-well.ilk.org> <20050523093759.M47072@mail.goinet.com> <44u0ktzufo.fsf@be-well.ilk.org> <4292399E.30107@ctzen.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--=-1XThMz6/mktYitEn4VtZ
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Just a guess, but would the sticky bit help here?

Chris

On Mon, 2005-23-05 at 16:14 -0400, cs wrote:
> Lowell Gilbert wrote:
> > Tony Shadwick <tshadwick@goinet.com> writes:
> >=20
> >=20
> >>On Mon, 23 May 2005, Lowell Gilbert wrote:
> >>
> >>
> >>>cs <cs-fbsd@ctzen.com> writes:
> >>>
> >>>
> >>>>For a directory, e.g. foo/, if I chmod 775 foo/, is it possible for
> >>>>newly created files and directories under foo/ to automagically
> >>>>inherit the group permissions of foo ?
> >>>>
> >>>>e.g.
> >>>>touch foo/test would be rw-rw-r--
> >>>>mkdir foo/sub would be rwxrwxr-x
> >>>>
> >>>>I am looking for a non umask solution.
> >>>>
> >>>>I seem to remember in debian, I was able to make the group permission=
s
> >>>>of the parent directory special for this magic to occur.
> >>>>
> >>>>I wonder if there is something similar in FBSD.
> >>>
> >>>If you set the suid bit, both owner *and* group will be set.
> >=20
> >=20
> >>I'll have to remember that one.  So if /home is a filesystem unto
> >>itself, if you set the suid bit on /home, all further creation beneath
> >>it will inherit the permissions you set above?
> >=20
> >=20
> > Only *directly* underneath it.  Obviously you wouldn't want to do that
> > for /home, but I find it quite useful on shared project directories
> > and the like.
>=20
> If you are talking about inheriting group identity, that is not what I=20
> am asking for.  I believe this is automagic under fbsd, e.g.
>=20
> mkdir foo
> chgrp somegroup foo
> touch foo/foofile
> mkdir foo/foodir
>=20
> foo/foofile and foo/foodir will have gid somegroup (without any suid or=20
> sgid).
>=20
> What I am more interested in is inherting group permissions.
>=20
> For example, I have a directory /var/www/foosite, which allows several=20
> different users to maintain it.
>=20
> One way to do it is to use a common account for all the users to=20
> maintain foosite.
>=20
> But it is "too loose" in accountability.
>=20
> Going full version control (cvs/subversion) is not really desired for me=20
> because it's not a "mission critical" thing.
>=20
> What I would like to do is create a group (say foogroup), assign all=20
> maintainers to the group, chgrp foogroup /var/www/foosite, and chmod g+w=20
> /var/www/foosite.
>=20
> Here is the "fun" part.
>=20
> User umask is 022 (which I would like to maintain).
>=20
> touch foosite/foofile
> mkdir foosite/foodir
>=20
> would render those new file/dir NOT group writable.
>=20
> umask 002 would make them group writable BUT it is a "global" setting=20
> and would affect other parts of the file system as well (e.g. user's home=
).
>=20
> Plus not all users are savvy enough to do umask 002 / umask 022 whenever=20
> necessary.
>=20
> I am looking for an "elegant" solution which I doubt I will find.
>=20
> After some thoughs, this is my "compromized" solution.
>=20
> The users will maintain foosite via ftp (within a VPN), and I use vsftpd=20
> and set the ftp umask to 002.
>=20
> -cs
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o=
rg"

--=-1XThMz6/mktYitEn4VtZ
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQBCkjs+5oLdYlMF6RsRAugKAKCJrwdvImFkkGssACVDZBBw9JQ2HgCeJfva
koxfEiznp5bzYS9L9965mP8=
=uXtZ
-----END PGP SIGNATURE-----

--=-1XThMz6/mktYitEn4VtZ--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1116879679.11570.0.camel>